Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 451 / 1193

CC Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
425
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
E
X
3:
The example below specifies lists of interfaces and subnets. These lists can be
used in the match-lists for specific applications.
ALU(config)# list L1 interface GigabitEthernet 7/0 interface
GigabitEthernet 7/1
ALU(config)# list L2 prefix 192.168.12.0/24 prefix
192.168.13.0/24
ALU(config)# match-list m1
ALU(config-match-list-m1)#1 udp list L1 list L2 service snmp
E
X
4:
In this example, we have 2 hosts 192.168.1.0 and 192.168.1.1, which need to
communicate with 2 other hosts 192.168.18.0 and 192.168.18.1 This can be
represented by the classifier as:
ALU(config)# list L3 host 192.168.1.0 host 192.168.1.1
ALU(config)# list L4 host 192.168.18.0 host 192.168.18.1
ALU(config)# match-list m2
ALU(config-match-list-m2)# tcp list L3 list L4 service
telnet
E
X
5:
This example shows a simple usage of match-list with a single rule.
ALU(config)# list L1 host 21.1.1.1 interface GigabitEthernet
7/0
ALU(config)# match-list m1
ALU(config-match-list-m1)# ip list L1 prefix 20.1.0.0/16
E
X
6:
The match-list in the example shown below, specifies rule for SSH and POP3
traffic from any source and destined for network 192.168.12.0/24 and
192.168.13.0/24.
ALU(config)# list L1 prefix 192.168.12.0/24 prefix
192.168.13.0/24
ALU(config)# match-list m1
ALU(config-match-list-m1)# 1 tcp any list L1 service ssh
ALU(config-match-list-m1)# 2 tcp any list L1 service pop3